← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-10823
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
CVE-2026-10824
Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion
CVE-2026-5305
Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS
CVE-2026-9702
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
CVE-2026-10749
Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData
CVE-2026-10753
Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
CVE-2026-10735
ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
CVE-2026-10531
AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute
CVE-2026-9709
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure
CVE-2026-9710
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure